CVE Feed

    Dashboard / CVE / CVE-2012-4455

    CVE-2012-4455

    openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock/.

    Published:Sep 7, 2012
    Last Modified:Apr 11, 2025
    EPS:Oct 10, 2012
    EPSS Score:0.00024
    CVSS Score:6.2

    Affected Products

    Vendor
    Opencryptoki Project
    Product
    Opencryptoki

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-40253 (CVSS 6.8) — openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. In versions 3.26.0 and below, the BE…
    CVE-2026-23893 (CVSS 6.8) — openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnera…
    CVE-2026-22791 (CVSS 6.6) — openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer ov…
    CVE-2024-0914 (CVSS 5.9) — A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#…
    CVE-2021-3798 (CVSS 5.5) — A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC …
    CVE-2012-4454 (CVSS 2.9) — openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permission…

    References

    http://opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki%3Ba=commitdiff%3Bh=5667edb52cd27b7e512f48f823b4bcc6b872ab15
    http://secunia.com/advisories/50702
    http://sourceforge.net/mailarchive/message.php?msg_id=29191022
    http://www.openwall.com/lists/oss-security/2012/09/07/2
    http://www.openwall.com/lists/oss-security/2012/09/07/6
    http://www.openwall.com/lists/oss-security/2012/09/09/2
    http://www.openwall.com/lists/oss-security/2012/09/20/6
    http://www.openwall.com/lists/oss-security/2012/09/25/5
    http://www.openwall.com/lists/oss-security/2012/09/27/2
    http://www.securityfocus.com/bid/55627
    https://bugzilla.redhat.com/show_bug.cgi?id=730636
    https://exchange.xforce.ibmcloud.com/vulnerabilities/78943
    http://opencryptoki.git.sourceforge.net/git/gitweb.cgi?p=opencryptoki/opencryptoki%3Ba=commitdiff%3Bh=5667edb52cd27b7e512f48f823b4bcc6b872ab15
    http://secunia.com/advisories/50702
    http://sourceforge.net/mailarchive/message.php?msg_id=29191022
    http://www.openwall.com/lists/oss-security/2012/09/07/2
    http://www.openwall.com/lists/oss-security/2012/09/07/6
    http://www.openwall.com/lists/oss-security/2012/09/09/2
    http://www.openwall.com/lists/oss-security/2012/09/20/6
    http://www.openwall.com/lists/oss-security/2012/09/25/5
    http://www.openwall.com/lists/oss-security/2012/09/27/2
    http://www.securityfocus.com/bid/55627
    https://bugzilla.redhat.com/show_bug.cgi?id=730636
    https://exchange.xforce.ibmcloud.com/vulnerabilities/78943

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High